This vulnerability (CVE-2025-6946) affects WatchGuard Fireware OS version 12.0. It is a stored XSS issue in the management interface related to IPS configuration. An attacker with administrator privileges and authentication can inject malicious JavaScript code that executes in the context of other management users' sessions, potentially leading to session hijacking or other client-side impacts. The CVSS 3.1 base score is 4.8, indicating moderate risk. No known exploits are reported in the wild, and no patch or vendor advisory details are currently available.

An authenticated administrator can execute arbitrary JavaScript code in the management interface of other users, which could lead to session hijacking or manipulation of the management interface. The vulnerability requires high privileges and user interaction (UI required). There is no indication of impact on confidentiality, integrity, or availability beyond the XSS context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrator access to trusted users only and consider monitoring for suspicious activity related to the management interface.